# CVEs published 2015-06-11

7 CVEs were published on June 11, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9732](https://cve.now/CVE-2014-9732.md): The cabd\_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an inv (no CVSS)
- [CVE-2015-4467](https://cve.now/CVE-2015-4467.md): The chmd\_init\_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers (no CVSS)
- [CVE-2015-4468](https://cve.now/CVE-2015-4468.md): Multiple integer overflows in the search\_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of servic (no CVSS)
- [CVE-2015-4469](https://cve.now/CVE-2015-4469.md): The chmd\_read\_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a de (no CVSS)
- [CVE-2015-4470](https://cve.now/CVE-2015-4470.md): Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer ov (no CVSS)
- [CVE-2015-4471](https://cve.now/CVE-2015-4471.md): Off-by-one error in the lzxd\_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buf (no CVSS)
- [CVE-2015-4472](https://cve.now/CVE-2015-4472.md): Off-by-one error in the READ\_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (applicatio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.